Icewarp Server

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-36580 MEDIUM POC This Month

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Open Redirect Icewarp Server Mail Server

NVD

CVSS 3.1

6.1

EPSS

1.5%

CVE-2020-8512 MEDIUM POC THREAT This Month

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Icewarp Server

NVD Exploit-DB

CVSS 3.1

6.1

EPSS

14.8%

CVE-2021-36580

EPSS 2% CVSS 6.1

MEDIUM POC This Month

Open Redirect Icewarp Server Mail Server

NVD

CVE-2020-8512

EPSS 15% CVSS 6.1

MEDIUM POC THREAT This Month

XSS Icewarp Server

NVD Exploit-DB